FACT_core icon indicating copy to clipboard operation
FACT_core copied to clipboard

hash type not supported

Open frakman1 opened this issue 3 years ago • 1 comments

If my understanding is correct, then the format for the /etc/passwd entry is: $id$salt$encrypted where id is the encryption method, right?

So how come it was able to accept the hash type for the second entry and decrypt it, but not the first one?

image

frakman1 avatar Nov 30 '21 17:11 frakman1

"hash type is not supported" is more like a general error message when cracking the password failed. It sure looks like a normal MD5 entry. I can't tell what exactly went wrong, though. You could try it manually by copying the hash into a text file and running john (at least this could tell us what went wrong):

src/plugins/analysis/users_and_passwords/bin/john hash.txt

jstucke avatar Dec 01 '21 08:12 jstucke